$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: o9HO4vzfgLvBhkJhWvV3kewx/UYVPXg79hWwWECrYeM= Subject key identifier: 66:82:52:46:C4:F5:33:D9:A3:99:40:FA:A0:0F:64:AD:51:00:94:6F Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 7FD4C3B5AD76E619D60BF9D9C5F3836F4631C906 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0302 Signing time: Sun 15 Jun 2025 11:22:09 +0000 Manifest this update: Sun 15 Jun 2025 11:17:09 +0000 Manifest next update: Wed 18 Jun 2025 21:44:09 +0000 Files and hashes: 1: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: fwyJa5mhG/p5zrm7WsD823rq8IWOTIX6aI5FYC++s0M=) 2: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: KY5Q38tghqbGAveqQA6JKe7i+KFoXalouHQ/ChXrWvk=) 3: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 4: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: iTZXOJm9rWmopFLHD6gQjacaA2jqtNJAKBWzpYpmoHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:d4:c3:b5:ad:76:e6:19:d6:0b:f9:d9:c5:f3:83:6f:46:31:c9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Jun 15 11:17:09 2025 GMT Not After : Jun 18 21:44:09 2025 GMT Subject: CN=66825246C4F533D9A39940FAA00F64AD5100946F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:da:f6:80:34:09:45:43:c8:b5:ed:1c:d4: 86:f4:c6:61:41:0f:13:23:7f:34:79:72:79:91:51: 65:92:e4:76:9e:38:04:9e:94:76:12:2e:5e:a5:4f: 21:6b:ee:3b:8a:7e:4a:e9:88:b7:53:ce:59:3c:e1: c3:4f:79:76:15:ea:df:a9:62:69:d4:5b:c2:61:36: 73:cb:5b:cc:bc:26:e3:7e:59:97:fb:a4:8d:cd:37: 88:af:b8:d6:c7:c9:10:17:fd:f0:22:18:1f:b6:a6: a8:9d:a9:f5:80:99:b3:38:6c:bc:6f:15:5a:b6:39: 8f:69:8b:5d:8a:49:56:d4:49:a7:fc:b7:3b:18:ba: 79:a7:f6:93:e5:0d:ad:4f:9f:32:2b:bc:d4:78:57: be:01:2a:68:72:1a:81:ba:70:62:55:52:01:3a:de: 64:3e:50:6b:3c:b2:0c:9c:40:53:71:ab:84:39:62: c8:52:a1:81:66:94:10:01:5a:14:81:2a:63:6f:1d: d5:82:5d:5d:7e:2c:1b:ae:0b:c4:c8:43:f7:46:dd: b1:d2:5b:93:6c:42:76:49:32:6b:a6:37:c1:97:31: 54:de:f7:b9:f4:fe:76:4a:2e:ef:23:60:38:c5:86: 4b:43:f7:b2:b3:92:a6:92:29:49:f2:fa:b9:17:57: 2a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:82:52:46:C4:F5:33:D9:A3:99:40:FA:A0:0F:64:AD:51:00:94:6F X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:77:17:67:cb:70:bf:da:2a:e1:be:ea:97:a8:2c:83:dc:9f: 73:2c:16:ed:47:2b:be:17:c7:eb:92:59:1f:06:fa:98:84:16: 49:92:0d:3b:41:c0:84:e6:6f:4f:38:79:2d:2e:12:5c:86:d7: c4:c4:3a:6a:00:ab:5d:88:a3:a7:93:9a:e7:0b:44:9c:0d:f8: 28:9a:4c:6d:6e:6c:d4:0a:9f:8a:d0:ac:f4:b6:4f:43:0f:bc: 65:45:41:6e:6a:b1:b1:48:0c:5b:90:0f:19:d8:b6:e1:29:f2: 08:7e:98:db:07:c9:0b:55:a5:0b:46:d1:ee:62:2a:95:3b:9b: 6f:c1:ca:24:e2:07:7f:3a:d7:57:93:e3:88:17:a6:95:3b:af: ee:4b:ed:22:a7:97:2b:56:31:50:88:0e:d0:bf:cb:68:07:b2: 5f:64:25:a1:9d:dc:35:7d:3e:3a:c8:54:ab:1c:b6:6e:d3:e6: 07:d8:50:90:a7:aa:14:90:bf:8d:e0:a3:08:87:9c:31:43:29: 93:cf:0e:f7:fd:ed:45:eb:3d:ce:36:9e:0c:ae:af:ec:bf:de: 82:94:4f:ef:c4:0a:37:cb:fa:d6:76:83:28:c9:cc:aa:d8:1d: 65:98:ec:b2:f6:b9:0b:25:14:3f:6f:7e:40:c6:fb:67:78:e3: 96:26:fc:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9TDta125hnWC/nZxfODb0YxyQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNTA2MTUxMTE3MDlaFw0yNTA2MTgyMTQ0MDlaMDMxMTAvBgNV BAMTKDY2ODI1MjQ2QzRGNTMzRDlBMzk5NDBGQUEwMEY2NEFENTEwMDk0NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZ9r2gDQJRUPIte0c1Ib0xmFB DxMjfzR5cnmRUWWS5HaeOASelHYSLl6lTyFr7juKfkrpiLdTzlk84cNPeXYV6t+p YmnUW8JhNnPLW8y8JuN+WZf7pI3NN4ivuNbHyRAX/fAiGB+2pqidqfWAmbM4bLxv FVq2OY9pi12KSVbUSaf8tzsYunmn9pPlDa1PnzIrvNR4V74BKmhyGoG6cGJVUgE6 3mQ+UGs8sgycQFNxq4Q5YshSoYFmlBABWhSBKmNvHdWCXV1+LBuuC8TIQ/dG3bHS W5NsQnZJMmumN8GXMVTe97n0/nZKLu8jYDjFhktD97KzkqaSKUny+rkXVyqJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZoJSRsT1M9mjmUD6oA9krVEAlG8wHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAId3F2fLcL/aKuG+6peoLIPcn3MsFu1HK74X x+uSWR8G+piEFkmSDTtBwITmb084eS0uElyG18TEOmoAq12Io6eTmucLRJwN+Cia TG1ubNQKn4rQrPS2T0MPvGVFQW5qsbFIDFuQDxnYtuEp8gh+mNsHyQtVpQtG0e5i KpU7m2/ByiTiB38611eT44gXppU7r+5L7SKnlytWMVCIDtC/y2gHsl9kJaGd3DV9 PjrIVKsctm7T5gfYUJCnqhSQv43gowiHnDFDKZPPDvf97UXrPc42ngyur+y/3oKU T+/ECjfL+tZ2gyjJzKrYHWWY7LL2uQslFD9vfkDG+2d445Ym/P8= -----END CERTIFICATE-----Generated at Tue Jun 17 05:42:25 2025 by rpki-client